As a Salesforce admin, I worked on a banking management app. For that app, we created two profiles: employee and manager. As the manager holds a higher position, he has more access than employees. The requirement was that when the manager was on leave, we needed someone to be there on his behalf and manage the work assigned to him.
However, the employees can’t access some information on the manager’s profile because they don’t have permission to access it.
For that, we have a feature called permission sets in Salesforce, which gives additional access to users. Here, I explain why we need to assign permission sets to users instead of giving permissions from profiles, and then I will explain how to create permission sets and assign them to users in Salesforce.
Additionally, I will explain what a permission set group is in Salesforce and how to assign a permission set group in Salesforce.
Permission Sets in Salesforce
In Salesforce, a permission set is a collection of settings and permissions that gives additional access to users they already have from their profile without changing it. Using the permission set, we cannot remove the permission access that we have provided to the profile. We can only give extra access to users.
It allows administrators to extend specific permissions, such as access to objects, fields, and applications, to individual users or groups of users based on their roles in the organization.
Why Can’t We Give Additional Access to a User From the Profile?
For example, there are two profiles, employee and manager, with different permissions. The manager has more access than the employee profile user. When we grant additional access to a specific user from the employee profile, other users from the same profile will also gain access to the manager’s data. This will lead to a security or data privacy issue.
For that, we can create a permission set and give additional access to a specific user from the employee profile so that only that user can access the manager profile data.
Create Permission Sets in Salesforce
Here, we will create the permission set to provide additional user access. I explained how to create a permission set in Salesforce in the following steps.
Before Assigning Permission Set to the User
First, we will see why we need to assign a permission set to a user. Here, I logged in as the Manager Profile user, and they have access to the Customer Loan Object.
But when I log in from the Employee Profile user, you can see that they cannot access the customer loan object that the manager profile user can access.
Now, we will create a permission set so that this user can access that particular object.